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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
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DETAILED ACTION 

1. Claims 1-21 are pending. Claims 1-10 and 17-21 are withdrawn from 
consideration. 

Election/Restrictions 

2. Applicant's election without traverse of claims 1 1-16 in the reply filed on March 
10, 2005 is acknowledged. 

Specification 

3. The disclosure is objected to because of the following informalities: In the 
detailed description, pg. 8, paragraph 3, line 8, applicant refers to "the X.500 directory 
102 (see Figure 4)" and first, does not specify which figure 4 drawing is being 
referenced since there are figures 4A-4C and second, there is no item 102 on any of the 
figure 4 drawings that embodies the X.500 directory. In addition, pg. 30, paragraph 2, 
line 1 states, "Referring to FIGURES 6A, 6B and 6C", however, these figures do not 
exist. It is assumed the applicant meant FIGURES 4A, 4B and 4C. 

Appropriate correction is required. 

Claim Rejections - 35 USC §112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 
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4. Claims 12-16 rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

5. Claims 12 and 15 recites the limitation "caveat" in line 3 of claim 12 and lines 8- 
13 of claim 15. It is not clear what is meant by the term "caveat" and there is insufficient 
explanation given in the specification. Unless applicant intended caveat to be used how 
it is defined in the English dictionary, then proper clarification is needed. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Hereafter patent literature that is referenced as prior art will be cited by column 
and line number in the form of (column numberline number range). For example, the 
citation (6:23-27) refers to lines 23-27 of the 6 th column in the reference. 

6. Claim 1 1 rejected under 35 U.S.C. 102(b) as being anticipated by Howell et al. 
(Howell), U.S. Patent No. 5,276,901. 

As per claim 1 1 : 

Howell discloses a method of layered defense-in-depth knowledge-based 
management, comprising: 
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authenticating a user of the knowledge base (6:6-10 wherein the user being on 
the access list functions as authenticating the user); 

determine the clearance level of a requested document by the authenticated user 
(6:16-19); 

determine the clearance level of the authenticated user (6:19-23); 

comparing the clearance level of the document with the clearance level of the 
authenticated user (6:19-23); 

and displaying the secure document to the authenticated user in response to the 
clearance level of the user dominating the clearance level of the requested document 
(6:23-26, wherein granting access to the document functions as displaying it). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 12-14 rejected under 35 U.S.C. 103(a) as being unpatentable over Howell 

(U.S. 5,276,901) as applied to claim 1 1 above, and further in view of Erickson, U.S. 

Patent No. 5,765,152. 

As per claim 12: 

Howell fails to teach a method further comprising determining the allowance of 
both a document caveat and clearance access in response to the comparison of the 
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clearance level of a document with the clearance level of the authenticated user. 
However, Erickson discloses a method wherein the document is assigned a set of 
permissions which function as document caveats, and these permissions, used in 
conjunction with the clearance access of the document are used to determine whether a 
user is allowed access to the document (3:25-26). 

It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to utilize document permissions when determining user access to a 
document because this adds control to how the document is used since the user can 
only manipulate the document as defined by its permissions, hence, the document 
cannot be written or saved if it is not in the permissions of the document (10:61-65). 

As per claim 13: 

Howell fails to teach a method further comprising encrypting and signing the 
authenticated user. However, Erickson discloses a method wherein the user must have 
a digital signature (21:34-37). 

It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to require the user to present a digital signature because this 
would add an extra layer of security and prevent someone from stealing the actual 
user's identity. 

As per claim 14: 

Howell fails to teach a method wherein authenticating a user comprises a 
certificate authority program running on a server. However, Erickson discloses a 
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method wherein a user's digital signature, signed by a certification authority, is used to 
authenticate the user (21 :40-45). 

It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to use a certification authority when authenticating a user because 
the unique code the authority uses becomes apparent before anything is encrypted to 
the key which can only be signed by the individual using the matching key (21:45-48). 
Therefore, the certification authority acts as a trusted third party wherein when it verifies 
something, both sides can be sure that it is authentic. 

8. Claim 15 and 16 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Howell (U.S. 5,276,901) and further in view of Erickson (U.S. 5,765,152). 
As per claim 15: 

Howell substantially teaches a method comprising: 
authenticating a user of the knowledge base 6:6-10); 
determine the clearance level of a requested secure document (6:16-19); 
determine the clearance level of the authenticated user (6:19-23); 
comparing the clearance level of the requested document with the clearance 
level of the authenticated user (6:19-23); 

and displaying the secure document to the authenticated user (6:23-26). 

Howell fails to teach a method comprising: 

obtain a document caveat; 

obtain an authenticated user caveat; 



Application/Control Number: 09/892,281 Page 7 

Art Unit: 2132 

comparing the authenticated user caveat with the document caveat to allow 
access to the obtained document caveat; 

determining the access allowability of the obtained document caveat; 

determine the allowance of both the document caveat and the clearance access 
to identify clearance of the authorized user to the requested secure document. 
However, Erickson discloses a method wherein permissions function as caveats and 
document and user permissions are determined (10:59-60, 1 1 :2-6) then compared 
(17:26-31). This comparison, used in conjunction with the clearance comparison 
determines the allowability of the user to the document (3:25-26). 

It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to utilize document permissions when determining user access to a 
document because this adds control to how the document is used since the user can 
only manipulate the document as defined by its permissions, hence, the document 
cannot be written or saved if it is not in the permissions of the document (10:61-65). 

As per claim 16: 

Howell and Erickson substantially teach a method as applied to claim 15 above 
and furthermore, Erickson teaches a method further comprising multiple authentication 
of a user prior to comparing the clearance level of the requested document with the 
clearance level of the authenticated user (24:4551). 

It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to require the user to go through multiple authentication in order to 
ensure the user's identity and prevent identity theft. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kristin Derwich whose telephone number is 571-272- 
7958. The examiner can normally be reached on Monday - Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Kristin Derwich 
Examiner 
Art Unit 2132 
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SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 



